Privacy Policy
Last updated: [EFFECTIVE DATE]
This Privacy Policy explains how [YOUR LEGAL BUSINESS NAME] ("The Rudiment," "we," "us") collects, uses, and protects information when you use The Rudiment web application (the "Service").
1. Information We Collect
We collect only what's needed to run the Service:
- Account information: email address, display name, and a securely hashed password (we never store your password in plain text).
- Band content: song titles, lyrics, chords, BPM, keys, setlists, gig details, venue information, and any logos or background images you upload for your band.
- Personal annotations: private chord/cue notes you add for yourself — these are visible only to you, never to other band members.
- Usage data: login timestamps and basic session information, used for security (e.g. rate-limiting) and account activity.
- Device storage: we use your browser's local storage to remember preferences (font size, toggle states, etc.) on your device. This never leaves your device.
2. How We Use Information
- To provide and operate the Service — storing your songs, gigs, and setlists, and syncing them across your devices.
- To authenticate you and protect your account (login, password reset, email verification).
- To send you service-related email: password resets, email verification, and important account notices. We do not send marketing email without separate consent.
- To detect and prevent abuse (e.g. signup rate limiting, login attempt limiting).
3. Third Parties We Use
We use a small number of third-party services to run The Rudiment, and each only receives the minimum data it needs to do its job:
- Resend — sends transactional email on our behalf (password resets, email verification). Resend receives your email address and the message content only for the email being sent.
- Lemon Squeezy — [when billing is live] handles all payment processing and sales tax/VAT as our Merchant of Record. The Rudiment never sees or stores your card details — Lemon Squeezy handles that entirely.
- [YOUR HOSTING PROVIDER] — hosts our servers and database.
We do not sell your personal information to anyone, for any reason.
4. Data Retention and Deletion
We keep your account and band data for as long as your account is active. You can permanently delete your own account at any time from Preferences → Account → Delete My Account. This immediately and permanently removes your account, your personal annotations, and your band memberships. If you own a band, you'll need to transfer ownership or delete the band first.
Deleting a band (as its owner) permanently removes that band's songs, gigs, venues, and all members' personal annotations for it. This cannot be undone.
5. Children's Privacy
The Rudiment is not directed at children under 13, and we do not knowingly collect information from children under 13. If you believe a child has provided us with personal information, contact us at [PRIVACY CONTACT EMAIL] and we'll delete it.
6. Your Rights
Depending on where you live, you may have rights to access, correct, or delete your personal data, or to object to certain processing. You can exercise most of these rights directly in the app (editing your profile, deleting songs/bands, deleting your account). For anything else, contact us at [PRIVACY CONTACT EMAIL].
7. Security
We take reasonable technical measures to protect your data, including encrypted password storage, rate-limited login attempts, and access controls that restrict band data to that band's members. No method of transmission or storage is 100% secure, but we work to protect your information appropriately for what it is.
8. Changes to This Policy
We may update this policy from time to time. We'll update the "Last updated" date above when we do. Material changes will be communicated via email or an in-app notice.
9. Contact Us
Questions about this policy? Reach us at [PRIVACY CONTACT EMAIL].